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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under Oie provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply v/ill, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 

- Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )S Responsive to communication(s) filed on 29 August 2003 . 
2a)n This action is FINAL. 2b)E This action is non-final. 

3) n Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
Disposition of Claims 

4) 13 Claim(s) 1-22 is/are pending in the application. 

4a) Of the above claim{s) is/are withdrawn from consideration. 

5) 0 Claim(s) is/are allowed. 

6) S Claim(s) 1-22 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10)n The drawing(s) filed on is/are: a)n accepted or b)^ objected to by the Examiner. 

Applicant may not request that any objection to the clrawing{s) be held in abeyance. See 37 CFR 1.85(a). 
1 The proposed drawing correction filed on is: 3)0 approved b)n disapproved by the Examiner. 

If approved, corrected drawings are required in reply to this Office action. 

12) D The oath or declaration is objected to by the Examiner. 
Priority under 35 U.S.C. §§ 119 and 120 

1 3) 0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 

a)nAII b)n Some*c)n None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (POT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 

14) 0 Acknowledgment is made of a claim for domestic priority under 35 U.S.C. § 119(e) (to a provisional application). 

a) □ The translation of the foreign language provisional application has been received. 

15) n Acknowledgment is made of a daim for domestic priority under 35 U.S.C. §§ 120 and/or 121. 

Attachment(s) 

1 ) 13 Notice of References Cited {PTO-892) 4) □ Interview Summary (PTO-41 3) Paper No(s). . 

2) n Notice of Drattsperson's Patent Drawing Review (PTO-948) 5) [D Notice of Informal Patent Application (PTO-152) 

3) □ Information Disclosure Statement(s) (PTO-1449) Paper No(s) . 6) □ Other: 
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DETAILED ACTION 
Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(a) the invention was known or used by others in this country, or patented or described in a printed publication in this 
or a foreign country, before the invention thereof by the appHcant for a patent. 

2. Claims 1 , 11 , 2 1 , and 22 are rejected under 35 U.S.C. 1 02(a) as being anticipated by 
Patent No. 5,241,594, Kung et al. 

3. In regards to claim 1, Kung discloses a method of performing multiple user 
authentications with a single sign-on, comprising: 

performing a first user authentication (Kung, fig. 3, label 41, 42, col. 4, line 44-48); 
selecting a remote server subsequent to said first authentication (Kung, fig. 3, label 54); 
sending a token or "ID code and password" to said remote server containing 
authentication information responsive to said first authentication (Kung, fig. 4, label 20, 
col. 3, line 4-6); and 

decoding said authentication information, wherein said decoding or "comparing" said 
authentication information induces a second user authentication (Kung, fig. 3, label 49, 48, col. 

3, line 7-9). 

4. In regards to claim 1 1 , Kung discloses claim 1 as mentioned above, in addition discloses 
a user sign-on interface and link interface to select a remote server (Kung, col. 4, line 7-9, 37-40) 
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5. In regards to claims 21 , and 22, Kung discloses similar subject matter as mentioned in 
claim 1. 

Claim Rejections - 35 VSC § 103 

6. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

7. Claims 2-4, 9, 10, 12-13, are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Patent No. 5,241,594, Kung et al in view Patent No. 5,661,807, Guski et al. 

8. In regards to claim 2, Kung discloses a token, but fails to show the said sending includes 
sending said token within a universal resource locator. However, Guski et al discloses an 
authentication system using one-time password where at the requesting node a non-time 
dependent is generated from a non-secret information identifying a user and the host application 
ID (an universal resource locator) (Guski, Abstract, col. 6, lines 29-30). This is combined with a 
time-dependent value to produce a composite value that is encrypted to produce an 
authentication parameter or "token" (Abstract). Guski further teaches that it is a secure way to 
access host applications because the user's real host authentication password does not flow 
across the network in clear text, nor can the one-time password be reused if intercepted (Guski, 
col. 1, line 58-62). It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Kung as per teaching of Guski to gain the advantage of using one-time 
passwords because it prevents unauthorized access to a remote server from the reuse of the 
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authentication token and guarantees the integrity of the authentication information (Guski, col. 1, 
line 58-62). 

9. In regards to claim 3, Kung et al and Guski et al disclose claim 2 as mentioned above, in 
addition discloses said token includes a timestamp (Guski, col. 2, line 62-64). 

10. In regards to claim 4, Kung et al and Guski et al teach claim 2 as mentioned above, in 
addition discloses said token is encrypted (Guski, Abstract, line 9-10). 

11. In regards to claim 9, Kung et al and Guski et al disclose claim 1 as mentioned above, in 
addition discloses said first user authentication occurs within an Intranet (Kung, col. 2, line 60- 
64). 

12. In regards to claim 1 0, Kung et al and Guski et al disclose claim 1 as mentioned above, in 
addition discloses said second user authentication occurs within said remote server (Kung, col. 3, 
line 7-9). 

13. In regards to claim 12, Kung et al and Guski discloses similar subject matter as 
mentioned above in claim 2. 

14. In regards to claim 13, Kung et al and Guski discloses similar subject matter as 
mentioned above in claim 3. 

15. In regards to claim 1 9, Kung et al and Guski discloses similar subject matter as 
mentioned above in claim 9. 

16. In regards to claim 20, Kung et al and Guski discloses similar subject matter as 
mentioned above in claim 10. 

17. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would ha\'e been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

18. Claims 5-8, and 15-18 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Patent No. 5,241,594, Kung et al in view Patent No. 5,661,807, Guski et al. in further view of 
Microsoft Press, Computer Dictionary, 3"^ Edition. 

19. In regards to claim 5, 1 5, Kung et al and Guski et al teach claim 2 as mentioned above, in 
addition discloses, registering new users, but fails to disclose that a the token includes new user 
flag. However, Mirosoft Press teaches that a flag is used by a computer in processing or 
interoperating information and is used in information processing. Depending on its use, a flag 
can be a code, embedded in data, that identifies some condition or to indicate an event of some 
type (Microsoft Press, pg. 198). It would have been obvious to one of ordinary skill in the art at 
the time of the invention to modify Kung as per teaching of Guski in further view of Microsoft 
Press to gain the advantage of using flags because it will enable the client to communicate a 
condition to the remote host to process along with the authentication token and trigger a response 
accordingly. 

20. In regards to claim 6, 16, Kung et al and Guski et al in further view of Microsoft Press 
teach claim 5, in addition teaches said remote server creates a new user account in response to 
said new user flag (Kung, col. 3, hne 35-36, Microsoft Press, pg. 198, line 10). 

21 . In regards to claim 7, 17, Kung et al and Guski et al in further view of Microsoft Press 
teach claim 5, in addition teaches said token includes user profile update information (Kung, col. 
3, line 35-36, Microsoft Press, pg. 198, line 10). 
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22. In regards to claim 8, 1 8, Kung et al and Guski et al in further view of Microsoft Press 
teach claim 7, in addition teaches said remote server updates a user profile in response to said 
user profile update information (Kung, col. 3, line 35-36, Microsoft Press, pg. 198). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Mossadeq Zia whose telephone number is (703)305-8425. The 
examiner can normally be reached on Monday, Tuesday at 6:30 - 3:00, and Wednesday-Friday at 
8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Greg Morse can be reached on (703)308-4789. The fax phone number for the 
organization where this application or proceeding is assigned is (703) 872-9306. 

Any inquiry of a general nature or relating to the status of this application or proceeding 
should be directed to the receptionist whose telephone number is 703-308-3900. 
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